invalid_aggregation

Summary

invalid aggregation `{0}`

Help

{}

Details

When this fires

You used an aggregation function whose name isn't recognised. The parser knows avg, sum, max, min, p50 (alias median), p90, p95, p99, stddev, rate, and delta. Anything else lands here.

What to check

For per-second slopes, use rate(...)[window]. Without a window rate and delta collapse to the cross-series mean, which is rarely what you want.

# broken
expr = "p100(cpu.usage) > 80"
# fixed
expr = "p99(cpu.usage)[5m] > 80"

Caught by nanook check. See @/docs/nanook-expr.md for the aggregation list.